';
$h .= '' . cpradar_badges( $a ) . ' ' . esc_html( cpradar_date( $a['date'] ) ) . '
';
$h .= '';
if ( $full ) {
if ( '' !== $a['text'] ) {
$h .= '' . esc_html( cpradar_short( $a['text'] ) ) . '
';
}
$h .= '' . cpradar_source_line( $a ) . '
';
if ( 'group' === $a['source'] ) {
/* translators: %d: number of vulnerabilities */
$h .= '' . esc_html( sprintf( __( 'Show all %d vulnerabilities', 'syncnet-patch-radar' ), $a['count'] ) ) . ' ' . cpradar_group_list( $a ) . '' . esc_html__( 'Details and sharing →', 'syncnet-patch-radar' ) . '
';
}
return $h . ' ';
}
/**
* Share buttons (plain links – nothing is loaded from third parties until a visitor clicks).
*
* @param array $a Alert.
* @param bool $compact Buttons only, without the note.
* @return string HTML.
*/
function cpradar_share( $a, $compact = false ) {
$url = cpradar_alert_url( $a['id'] );
/* translators: %s: alert title */
$text = sprintf( __( 'Security alert: %s', 'syncnet-patch-radar' ), $a['title'] );
$mail = 'mailto:?subject=' . rawurlencode( $text ) . '&body=' . rawurlencode( $text . "\n\n" . $url );
$h = '' . esc_html__( 'LinkedIn, WhatsApp and Teams only open when you click them.', 'syncnet-patch-radar' ) . '
';
}
return $h;
}
/**
* Subscription box with main feed and vendor feeds.
*
* @param array $entries Cards.
* @param bool $compact One line with the main feed only.
* @return string HTML.
*/
function cpradar_subscribe( $entries, $compact = false ) {
$feed = cpradar_feed_url();
$vendors = array();
foreach ( $entries as $a ) {
$v = cpradar_vendor( $a );
if ( '' !== $v ) {
$vendors[ $v ] = true;
}
}
ksort( $vendors, SORT_NATURAL | SORT_FLAG_CASE );
$h = '';
if ( $compact ) {
$h = '
' . esc_html__( 'Subscribe via RSS:', 'syncnet-patch-radar' ) . ' ' . esc_html( $feed ) . ' ' . esc_html__( 'Copy address', 'syncnet-patch-radar' ) . '
';
return $h;
}
$h .= '
' . esc_html__( 'Subscribe to new alerts', 'syncnet-patch-radar' ) . '
';
$h .= '
' . esc_html__( 'With the RSS feed you see new alerts automatically – in Outlook, Thunderbird or any feed reader. No sign-up, no email address.', 'syncnet-patch-radar' ) . '
';
$h .= '
' . esc_html( $feed ) . ' ' . esc_html__( 'Copy address', 'syncnet-patch-radar' ) . '
';
$h .= '
';
/* translators: %s: vendor name (filled in by script) */
$h .= sprintf( esc_html__( 'Only %s', 'syncnet-patch-radar' ), '
' . esc_html__( 'Copy address', 'syncnet-patch-radar' ) . '
';
if ( count( $vendors ) > 1 ) {
$h .= '
' . esc_html__( 'Subscribe to single vendors only', 'syncnet-patch-radar' ) . ' ' . esc_html__( 'Copy the feed address and paste it into your feed reader or Outlook. Clicking a name shows that vendor\'s alerts on this page.', 'syncnet-patch-radar' ) . '
';
foreach ( array_keys( $vendors ) as $v ) {
$h .= '' . esc_html( $v ) . ' ' . esc_html__( 'copy feed address', 'syncnet-patch-radar' ) . ' ';
}
$h .= '
' . esc_html__( 'How to subscribe in Outlook', 'syncnet-patch-radar' ) . ' ' . esc_html__( 'Classic Outlook: right-click "RSS Feeds" in the folder pane → "Add a New RSS Feed…" → paste the address → "Add".', 'syncnet-patch-radar' ) . '
';
return $h . '
';
$h .= '
' . esc_html__( 'Am I affected?', 'syncnet-patch-radar' ) . ' ';
$h .= '
';
if ( count( $count ) > 1 ) {
$h .= '
';
foreach ( $count as $name => $n ) {
$h .= '' . esc_html( $name ) . ' ' . (int) $n . ' ';
}
$h .= '
';
}
/* translators: 1: number shown (filled in by script), 2: total number */
$h .= '
' . sprintf( esc_html__( '%1$s of %2$s alerts', 'syncnet-patch-radar' ), '' . (int) $total . ' ', (int) $total );
$h .= ' ' . esc_html__( 'Reset filter', 'syncnet-patch-radar' ) . '
';
return $h . '
/.
*
* @return string HTML.
*/
function cpradar_shortcode_list() {
cpradar_enqueue();
$id = get_query_var( 'cpradar_alert' );
if ( $id ) {
return '' . cpradar_single( $id ) . '
';
}
$s = cpradar_settings();
$entries = cpradar_entries();
$status = (array) get_option( 'cpradar_status', array() );
$intro = trim( (string) $s['intro'] );
if ( '' === $intro ) {
$intro = __( 'Collected automatically: vulnerabilities in widely used products that are rated critical by the German BSI, are known to be actively exploited, or are rated CVSS 9 or higher by the vendor. Check whether you are affected and install updates promptly.', 'syncnet-patch-radar' );
}
$h = '' . esc_html( $intro ) . '
';
$pos = $s['subscribe_pos'];
if ( 'top' === $pos || 'both' === $pos ) {
$h .= cpradar_subscribe( $entries, 'both' === $pos );
}
if ( ! $entries ) {
$h .= '
' . esc_html__( 'There are currently no critical alerts.', 'syncnet-patch-radar' ) . '
';
} else {
$h .= cpradar_search( $entries );
$h .= '
' . esc_html__( 'Several critical vulnerabilities in the same product are combined into one card – usually one update fixes them all.', 'syncnet-patch-radar' ) . '
';
$h .= '
';
foreach ( $entries as $a ) {
$h .= cpradar_card( $a );
}
$h .= '
' . esc_html__( 'No alert matches your search.', 'syncnet-patch-radar' ) . ' ' . esc_html__( 'Show all', 'syncnet-patch-radar' ) . '
';
}
$h .= cpradar_cta();
if ( 'bottom' === $pos || 'both' === $pos ) {
$h .= cpradar_subscribe( $entries );
}
$h .= '' . cpradar_credit() . '
' . esc_html__( '← All alerts', 'syncnet-patch-radar' ) . '
';
if ( ! $a ) {
return $back . '' . esc_html__( 'Alert no longer available', 'syncnet-patch-radar' ) . ' ' . esc_html__( 'This alert is older than the display period or has been withdrawn.', 'syncnet-patch-radar' ) . '
';
}
$h = $back . '' . cpradar_badges( $a ) . ' ' . esc_html( cpradar_date( $a['date'] ) ) . '
';
$h .= '' . esc_html( $a['title'] ) . ' ';
$share = cpradar_settings()['share_pos'];
if ( 'top' === $share || 'both' === $share ) {
$h .= '' . cpradar_share( $a, 'both' === $share ) . '
';
}
$h .= '';
switch ( $a['source'] ) {
case 'group':
$h .= '
' . esc_html( $a['text'] ) . '
' . cpradar_group_list( $a );
break;
case 'cisa':
$h .= '
' . esc_html( ! empty( $a['ransom'] ) ? __( 'According to the US agency CISA this vulnerability is already being exploited in attacks, also by ransomware groups. Affected systems should be updated immediately.', 'syncnet-patch-radar' ) : __( 'According to the US agency CISA this vulnerability is already being exploited in attacks. Affected systems should be updated immediately.', 'syncnet-patch-radar' ) ) . '
';
$h .= '' !== $a['text'] ? '
' . esc_html( $a['text'] ) . '
' : '';
break;
case 'nvd':
/* translators: %s: CVSS score */
$h .= '
' . esc_html( sprintf( __( 'This vulnerability is rated CVSS %s out of 10 and can be exploited over the network without authentication. It is currently not on the CISA list of actively exploited vulnerabilities – updates should still be installed promptly.', 'syncnet-patch-radar' ), cpradar_score( $a['cvss'] ) ) ) . '
';
$h .= '' !== $a['text'] ? '
' . esc_html( $a['text'] ) . '
' : '';
break;
default:
$h .= '' !== $a['text'] ? '
' . esc_html( $a['text'] ) . '
' : '';
$h .= '
' . esc_html__( 'The German Federal Office for Information Security (BSI) rates this advisory as critical, the highest level.', 'syncnet-patch-radar' ) . '
';
}
if ( 'group' !== $a['source'] ) {
/* translators: %s: alert ID */
$h .= '
' . sprintf( esc_html__( 'ID: %s', 'syncnet-patch-radar' ), '' . esc_html( $a['id'] ) . ' ' ) . '
';
}
$h .= '
' . cpradar_source_line( $a ) . '
';
if ( 'bottom' === $share || 'both' === $share ) {
$h .= cpradar_share( $a );
}
$h .= cpradar_cta() . '
%2$s %3$s · %4$s →
',
esc_url( $url ),
esc_html( 'cisa' === $a['source'] ? __( 'Actively exploited:', 'syncnet-patch-radar' ) : __( 'Critical now:', 'syncnet-patch-radar' ) ),
esc_html( cpradar_short( $a['title'], 90 ) ),
esc_html( cpradar_date( $a['date'] ) )
);
}
add_shortcode( 'syncnet_patch_radar_latest', 'cpradar_shortcode_latest' );
/**
* [syncnet_patch_radar_box count="3"] – compact cards for other pages.
*
* @param array $atts count.
* @return string HTML.
*/
function cpradar_shortcode_box( $atts ) {
cpradar_enqueue();
$atts = shortcode_atts( array( 'count' => 3 ), $atts );
$list = array_slice( cpradar_entries(), 0, max( 1, min( 12, (int) $atts['count'] ) ) );
$h = '';
return $h;
}
add_shortcode( 'syncnet_patch_radar_box', 'cpradar_shortcode_box' );
// Red dot on the menu item of the alerts page while a fresh, actively exploited vulnerability is listed.
/**
* Whether an actively exploited vulnerability is newer than the configured hours.
*
* @return bool
*/
function cpradar_urgent() {
static $urgent = null;
if ( null === $urgent ) {
$hours = (int) cpradar_settings()['menu_dot'];
$limit = time() - HOUR_IN_SECONDS * $hours;
$urgent = false;
if ( $hours > 0 ) {
foreach ( cpradar_alerts() as $a ) {
if ( 'cisa' === $a['source'] && $a['date'] >= $limit ) {
$urgent = true;
break;
}
}
}
}
return $urgent;
}
/**
* Markup of the dot.
*
* @return string
*/
function cpradar_dot() {
return ' ' . esc_html__( '(new urgent alert)', 'syncnet-patch-radar' ) . ' ';
}
/**
* Whether a URL points to the alerts page.
*
* @param string $url URL.
* @return bool
*/
function cpradar_is_page_url( $url ) {
$page = untrailingslashit( (string) wp_parse_url( cpradar_page_url(), PHP_URL_PATH ) );
$path = untrailingslashit( (string) wp_parse_url( (string) $url, PHP_URL_PATH ) );
return '' !== $page && $page === $path;
}
add_filter(
'render_block_core/navigation-link',
function ( $html, $block ) {
$hit = (int) ( $block['attrs']['id'] ?? 0 ) === (int) cpradar_settings()['page_id'] || cpradar_is_page_url( $block['attrs']['url'] ?? '' );
if ( ! $hit || ! cpradar_urgent() ) {
return $html;
}
cpradar_enqueue();
return (string) preg_replace( '#(.*? )#s', '$1' . cpradar_dot(), $html, 1 );
},
10,
2
);
add_filter(
'render_block_core/page-list',
function ( $html ) {
if ( ! cpradar_urgent() ) {
return $html;
}
$url = preg_quote( untrailingslashit( cpradar_page_url() ), '#' );
$new = (string) preg_replace( '#(]+href="' . $url . '/?"[^>]*>)(.*?)()#s', '$1$2' . cpradar_dot() . '$3', $html, 1 );
if ( $new !== $html ) {
cpradar_enqueue();
}
return $new;
}
);
add_filter(
'render_block',
function ( $html, $block ) {
if ( 'core/navigation' !== ( $block['blockName'] ?? '' ) || ! cpradar_urgent() || false === strpos( $html, 'cpr-menu-dot' ) ) {
return $html;
}
$p = new WP_HTML_Tag_Processor( $html );
if ( $p->next_tag( 'nav' ) ) {
$p->add_class( 'cpr-urgent' );
return $p->get_updated_html();
}
return $html;
},
20,
2
);
add_filter(
'nav_menu_item_title',
function ( $title, $item ) {
$page_id = (int) cpradar_settings()['page_id'];
$hit = ( 'page' === ( $item->object ?? '' ) && (int) $item->object_id === $page_id ) || cpradar_is_page_url( $item->url ?? '' );
if ( $hit && cpradar_urgent() ) {
wp_enqueue_style( 'cpradar' );
return $title . cpradar_dot();
}
return $title;
},
10,
2
);
// Title, description, robots for single alerts (core, Yoast SEO).
/**
* Alert of the current request, if any.
*
* @return array|null
*/
function cpradar_current() {
static $a = false;
if ( false === $a ) {
$id = get_query_var( 'cpradar_alert' );
$a = $id ? cpradar_alert( $id ) : null;
}
return $a;
}
/**
* Meta description for an alert.
*
* @param array $a Alert.
* @return string
*/
function cpradar_description( $a ) {
switch ( $a['source'] ) {
case 'cisa':
return __( 'Actively exploited. Update affected systems immediately.', 'syncnet-patch-radar' );
case 'group':
if ( 'cisa' === ( $a['type'] ?? '' ) ) {
/* translators: %d: number of vulnerabilities */
return sprintf( _n( '%d vulnerability is being actively exploited. Update affected systems immediately.', '%d vulnerabilities are being actively exploited. Update affected systems immediately.', $a['count'], 'syncnet-patch-radar' ), $a['count'] );
}
/* translators: 1: number, 2: CVSS score */
return sprintf( _n( '%1$d critical vulnerability (up to CVSS %2$s). Install updates.', '%1$d critical vulnerabilities (up to CVSS %2$s). Install updates.', $a['count'], 'syncnet-patch-radar' ), $a['count'], cpradar_score( $a['cvss'] ) );
case 'nvd':
/* translators: %s: CVSS score */
return sprintf( __( 'Critical vulnerability (CVSS %s), exploitable over the network without authentication. Install updates promptly.', 'syncnet-patch-radar' ), cpradar_score( $a['cvss'] ) );
default:
return cpradar_short( __( 'BSI rating: critical.', 'syncnet-patch-radar' ) . ' ' . $a['text'], 155 );
}
}
add_filter(
'document_title_parts',
function ( $parts ) {
$a = cpradar_current();
if ( $a ) {
/* translators: %s: alert title */
$parts['title'] = sprintf( __( 'Security alert: %s', 'syncnet-patch-radar' ), $a['title'] );
}
return $parts;
}
);
foreach ( array( 'wpseo_title', 'wpseo_opengraph_title', 'wpseo_twitter_title' ) as $cpradar_filter ) {
add_filter(
$cpradar_filter,
function ( $value ) {
$a = cpradar_current();
/* translators: %s: alert title */
return $a ? sprintf( __( 'Security alert: %s', 'syncnet-patch-radar' ), $a['title'] ) : $value;
}
);
}
foreach ( array( 'wpseo_metadesc', 'wpseo_opengraph_desc', 'wpseo_twitter_description' ) as $cpradar_filter ) {
add_filter(
$cpradar_filter,
function ( $value ) {
$a = cpradar_current();
return $a ? cpradar_description( $a ) : $value;
}
);
}
foreach ( array( 'wpseo_canonical', 'wpseo_opengraph_url' ) as $cpradar_filter ) {
add_filter(
$cpradar_filter,
function ( $value ) {
$a = cpradar_current();
return $a ? cpradar_alert_url( $a['id'] ) : $value;
}
);
}
add_filter(
'wpseo_robots',
function ( $value ) {
return cpradar_current() ? 'noindex, follow' : $value;
}
);
add_filter(
'wp_robots',
function ( $robots ) {
if ( cpradar_current() && ! defined( 'WPSEO_VERSION' ) ) {
$robots['noindex'] = true;
$robots['follow'] = true;
}
return $robots;
}
);
add_action(
'wp_head',
function () {
$a = cpradar_current();
if ( $a && ! defined( 'WPSEO_VERSION' ) ) {
printf( '' . "\n";
echo '' . esc_html( $title ) . ' ' . "\n";
echo '' . esc_html__( 'Critical vulnerabilities in widely used products, compiled automatically from BSI, CISA and NVD data.', 'syncnet-patch-radar' ) . ' ' . "\n";
echo '' . esc_html( get_bloginfo( 'language' ) ) . ' ' . "\n";
echo '' . esc_html( gmdate( 'r', $updated ) ) . ' 60 ' . "\n";
foreach ( $list as $a ) {
$url = cpradar_alert_url( $a['id'] );
$prefix = cpradar_is_exploited( $a ) ? '[' . __( 'actively exploited', 'syncnet-patch-radar' ) . '] ' : ( 'bsi' === $a['source'] ? '[' . __( 'critical (BSI)', 'syncnet-patch-radar' ) . '] ' : '' );
echo "- \n";
echo '
' . esc_html( $prefix . $a['title'] ) . ' ' . "\n";
echo '' . esc_html( $url . ( 'group' === $a['source'] ? '#' . $a['count'] . '-' . $a['date'] : '' ) ) . ' ' . "\n";
echo '' . esc_html( gmdate( 'r', $a['date'] ) ) . ' ' . "\n";
echo '' . esc_html( cpradar_description( $a ) ) . ' ' . "\n";
echo " \n";
}
echo '